Privacy
Last updated 30 October 2026
Your data, in short
YLC NETWORK FZC, a free zone company incorporated under the laws of the United Arab Emirates (Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates; licence no. 300641 issued by the Sharjah Publishing City Free Zone Authority), decides how your data is used and is answerable for it. For anything about your data, write to support@ylcnetwork.com: your message reaches a person.
This version describes what YLC does until 25 December 2026, while only the Founder Pack is sold. We never sell your data or rent it out. Only if you click “Accept” on ylcnetwork.com do Meta and TikTok learn, in hashed form, that one of their ads led to an order — see “Who else has access”; without “Accept”, nothing goes to them.
Your rights, if the GDPR applies to you: access, rectification, erasure, a copy in a portable form, restriction and objection, and the right to complain to your data protection authority. What you can do yourself, in your YLC account: correct your profile (Settings → Profile), stop the onboarding emails (Settings → Emails), and delete your account (Settings → Delete my account). On ylcnetwork.com, the “Cookies” link changes your choice on audience measurement and advertising. For anything else — a copy of your data, for example — write to us.
Your account's data is hosted by Supabase in the European Union. Some of our providers are in the United States: each one is named below, with its country.
What is collected
Your email address, given at payment. Your YLC account is created with it; it is used to send your order email, your single-use sign-in link and your six-digit sign-in codes, and, if ever needed, to reach you about your order or your account. A new account may also receive a few onboarding emails from YLC; each one carries a one-click unsubscribe link, and the “Emails” card of your account turns them off. Emails are sent through Resend, with click and open tracking turned off.
Your order: the Pack, paid once or in instalments, the instalments paid, its order number, with or without the founder box, and any refund. No card is ever shown to us.
For the box: the name, delivery address and phone number you give us, used only to ship it, and given to the carrier for that purpose.
What you choose to fill in on your profile: display name, username, bio, your time zone and the mode of your account.
If you arrive through an Ambassador link: the Whop username of the Ambassador who recommended the Pack, kept for thirty days in a cookie of your browser, then with your account. It is passed to Whop with your payment so that Whop credits that person.
How you reached the order: the campaign tags of the link (utm_source, utm_medium, utm_campaign, utm_content, utm_term), kept with your order so that we know which campaign sells. Only if you clicked “Accept” on ylcnetwork.com: the click identifiers Meta and TikTok put in the link or in their cookies (fbclid, _fbp, _fbc, ttclid, _ttp), and the IP address and browser of your order request — used only to report your purchase to Meta and TikTok, then deleted.
If you are an Ambassador: you link your Whop account on Whop's own page; we keep its identifier and username with your account, a short code for your links, the number of clicks on your links (counted without keeping any IP address), and we read your Ambassador figures at Whop to show them to you.
The Ambassador who recommended the Pack to you sees your username, the name of your business or agency if you give one, the date your account was created and the state of your Pack. They see your first name, your email address and your WhatsApp number only if you agree to share them — a setting you change at any time in Settings → Profile; it is off unless you turn it on.
From 25 December 2026, when your AI team opens, what you send it will be processed by the providers named in the full privacy policy, which replaces this version at the opening.
The reminder before sales close
If you ask for it on ylcnetwork.com, without buying: your email address and your language, to send you a reminder before Founder Pack sales close. The box is never pre-ticked; we first send you an email to confirm your address (double opt-in), and without that click nothing else is sent. Then two emails at most: on 17 December and on the morning of 24 December 2026, never once you have bought the Pack. As proof of your consent we keep its date, the version of the text you ticked, the page and a fingerprint of your IP address (never the address itself).
The legal basis is your consent, which you withdraw at any time with the link in each email (one click). The emails are sent through Resend. A request that is never confirmed is deleted after 30 days; everything else is deleted on 9 January 2027 at the latest.
Why
To sell you the Pack, create your account, ship your box, pay in your credits, give you your founding member benefits, run the Ambassador program and answer you.
The legal basis is the contract between us for your order, your account and the Ambassador program; your consent for the Microsoft Clarity cookie on ylcnetwork.com, and for the Meta and TikTok pixels and the report of your purchase to them (advertising: measuring which ads lead to an order and showing our ads to people likely to be interested) — withdrawn at any time with the “Cookies” link; our legitimate interest for security, error reports, preventing abuse and our cookieless audience measurement; and our legal obligations for accounting.
Who else has access
Supabase hosts the database and files and handles sign-in, in the European Union. Vercel hosts and serves the site and the account. Resend sends the emails, and receives those written to our contact address. Each processes data on our instructions and for no other purpose.
Whop (Whop Inc., United States) takes the payment of the Pack on its own page, as merchant of record: it receives your email address, your country, the offer chosen, an internal identifier of your YLC account so the payment reaches the right account, and the username of the Ambassador who recommended you if you came through a link; it charges, invoices and collects VAT, under its own privacy policy. Card data never reaches us.
The carrier that delivers your box receives your name and delivery address, for that delivery only.
Crisp (France, data kept in the European Union) carries support: the chat bubble inside your account and the messages sent to our contact address. It sees what you write, the address it comes from and your username.
Sentry receives error reports — what broke, on which page, and the type of browser or phone — without any name, email address or IP address, and keeps them in the European Union (Germany). Cloudflare Turnstile (Cloudflare, Inc., United States) guards the sign-in page: it receives technical signals from your browser and your IP address, never your email address.
Microsoft Clarity measures how ylcnetwork.com is used — clicks, scrolling and pages viewed, never what you type — only if you click “Accept” on the cookie banner; Microsoft keeps this data for up to 13 months. We also measure the audience of our public sites ourselves, without any cookie or third party: the page, the site that sent you there reduced to its name, the campaign tags of the link, the Ambassador code if there is one, the language and the type of device. Your IP address is never kept.
Meta (Meta Platforms Ireland Ltd, for Facebook and Instagram; data may be transferred to Meta Platforms, Inc. in the United States) and TikTok (TikTok Technology Limited, Ireland; data may be transferred outside the European Union, including to the United States and Singapore) — only if you click “Accept” on ylcnetwork.com. Their pixels record the pages viewed, the viewing of the Pack page and the click on “Order”. When you pay, our server reports the purchase to them: the amount excluding VAT, the currency, 1 or 3 instalments, the order number, your email address, your country and an identifier of your YLC account — these three hashed (SHA-256), never in clear — their click identifiers, and the IP address and browser of your order request. The purpose is advertising: measuring which ads lead to an order and showing our ads to people likely to be interested. For what their pixels collect, Meta and TikTok decide with us and are answerable under their own privacy policies. Without “Accept”, nothing is loaded and nothing is sent to them. Nothing is sold or rented out.
How long
As long as the account exists, unless this policy gives a shorter period: the pages viewed on our sites are deleted after 90 days, and only daily totals are kept. The IP address and browser captured for advertising are deleted as soon as the purchase has been reported to Meta and TikTok; the campaign tags stay with the order. Payments and invoices are kept for accounting, as the law requires. When you delete your account, its content is deleted as described under “Your rights”.
Your rights
If the GDPR applies to you, you may ask for access to your data, its rectification, its erasure, a copy in a portable form, or the restriction of processing, and object to processing based on our legitimate interest. Your display name, username, bio and time zone are corrected by you from the profile screen.
You delete your account yourself, from Settings → Delete my account, in your YLC account, by typing the word the screen asks for: the account is deleted with what it contains and its files. Payments made through Whop stay recorded, without you, for accounting.
You can also complain to the data protection authority of your country.
Contact
Write to support@ylcnetwork.com. Your message reaches a person, not a queue.
Governing language
This document exists in several languages. The English version governs: it is the language it was drafted in. The other versions are courtesy translations; in case of divergence, the English version applies.
This clause does not deprive anybody of the rights the GDPR gives them, nor of the possibility to complain to their data protection authority.